Confidentiality and responsible use of event information
You are about to share programme, supplier or attendee details with an outside planner and want to set sensible limits first.
Opens WhatsApp with a draft you can edit before sending. Nothing is sent automatically.
The short answer
Share the least information that lets the work be done, keep attendee data with your own systems where possible, and write down who may see what. A non-disclosure agreement (NDA) is an option you may request before any sensitive detail is shared.
This page describes working practice and questions to settle. It makes no claim of compliance with any data protection law. For legal questions, ask a qualified adviser.
Start with what is actually needed
Most planning decisions need aggregate facts, not personal ones: an expected headcount, the origin of delegates by area and the mix of session types. Names, contact details and individual registration records are rarely needed to write a plan or compare suppliers.
If a task seems to need attendee-level data, first ask whether a count or a sample would do.
Information types and a sensible default
| Information | Sensible default |
|---|---|
| Programme draft and speaker list under embargo | Share only with the named lead. Mark the file as confidential and agree how long it is kept. |
| Budget figures and supplier quotations | Share what the work needs. Keep signed contracts with your own finance team. |
| Attendee lists and registration records | Keep them in your own registration system. Share counts or anonymised summaries instead. |
| Sponsor or member information | Share only what a task needs, and only with your approval. |
| Photos, recordings and delegate feedback | Decide who owns them, who may see them and when they are deleted. |
How to keep the registration form light
The less personal data you collect, the less there is to protect. The registration form field minimiser helps you list each proposed field, its purpose, whether it is needed and who owns retention, and raises questions for your privacy reviewer.
The tool does not decide what is lawful. Questions that arise go to the person responsible for privacy in your organisation.
NDAs and written agreements
You may ask for an NDA before sharing sensitive material. Bring your own template if your organisation has one, and have it reviewed by your own legal reader.
The written engagement can also state who may access shared files, how long they are kept and what happens to them when the engagement ends.
Ending an engagement
- List what was shared and where it is stored.
- Agree what is returned, what is deleted and what the client keeps.
- Confirm in writing when access to shared folders is removed.
Where to read Malaysian guidance
Official Malaysian personal data guidance is published by the Personal Data Protection Department at pdp.gov.my. Your organisation's own privacy or legal contact decides how it applies to your event.
For this website's own behaviour, see the privacy notice.
Worked example · Fictional example
A fictional confidentiality arrangement
Fictional organisation and figures, for illustration only.
A fictional professional body plans a members-only forum. Its secretariat wants help comparing venues and writing a supplier brief but holds a members list it should not hand over.
The secretariat shares only a headcount range and delegate origin by area. The speaker line-up stays with the secretariat until it is public. It asks for an NDA covering the draft programme, and agrees that shared folders are closed at handover.
Use this yourself
Information-sharing worksheet
Complete one row per type of information before sharing it with any outside planner.
| Information type | Needed for which task? | Who may see it | Where it is stored | Delete or return by |
|---|---|---|---|---|
| Expected headcount (range) | ||||
| Delegate origin by area (counts) | ||||
| Draft programme | ||||
| Speaker details | ||||
| Budget and quotations | ||||
| Registration fields (see the minimiser) | ||||
| Sponsor or member details |
Handle it in-house, or bring in help?
Your team can usually handle this when
- The planning task needs only public information.
- Your organisation already has an information-handling policy and a person to apply it.
- You are asking for a template, not for access to your files.
Outside planning help earns its fee when
- You need a lead to work across your files and suppliers and want the limits written down.
- Several people on your side need a clear rule about what is shared.
- A committee or legal reader must see the arrangement before work starts.
Want the limits on information set before work starts?
A project lead can list what the work needs, propose the minimum to share, agree who may access which files and note an NDA if you ask for one. The terms go into the written scope, and the handover step covers what is returned or deleted.
Questions organisers ask
Can I ask for an NDA?
Yes. Ask before sharing sensitive material, and have your own legal reader review the text.
Do I need to send attendee lists?
Usually not. Counts and aggregates are enough for most planning decisions.
Does this page say the service is PDPA compliant?
No. It describes working practice and questions only. Legal questions go to a qualified adviser.
What happens to files when the work ends?
That is agreed in writing: what is returned, what is deleted and when access to shared folders is closed.
Related resources
Sources and check dates
- Personal Data Protection Department Malaysia (portal), Jabatan Perlindungan Data Peribadi (checked 2026-10-07). Where official Malaysian personal data legislation and guidance are published.
Content record: Draft. Written from the cited sources and checked by automated rules; not yet independently reviewed.